<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<Events>
  <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
      <Provider Name="Microsoft-Windows-Directory-Services-SAM" Guid="{0d4fdc09-8c27-494a-bda0-505e4fd8adae}"/>
      <EventID>16962</EventID>
      <Version>0</Version>
      <Level>4</Level>
      <Task>0</Task>
      <Opcode>0</Opcode>
      <Keywords>0x8000000000000000</Keywords>
      <TimeCreated SystemTime="2020-06-12T15:26:36.6282004Z"/>
      <EventRecordID>667</EventRecordID>
      <Correlation ActivityID="{d8788967-40cd-0001-eb89-78d8cd40d601}"/>
      <Execution ProcessID="656" ThreadID="660"/>
      <Channel>System</Channel>
      <Computer>DESKTOP-4AR7BIA</Computer>
      <Security UserID="S-1-5-18"/>
    </System>
    <EventData Name="SAMMSG_RESTRICT_REMOTE_SAM_DEFAULT_SD">
      <Data Name="Default SD String:">O:SYG:SYD:(A;;RC;;;BA)</Data>
    </EventData>
  </Event>
</Events>
